← Back to CVE List
CVE-2024-12400
Published:
2025-01-30T06:15Z
Last Modified:
2025-01-30T16:15Z
Source:
MITRE CVE List
License:
MITRE-CVE-TOS
The tourmaster WordPress plugin before 5.3.5 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt